Bug 860421 - subscription-manager refresh throws LdapFluff::FreeIPA::MemberService::UIDNotFoundException
subscription-manager refresh throws LdapFluff::FreeIPA::MemberService::UIDNot...
Product: Red Hat Satellite 6
Classification: Red Hat
Component: Content Management (Show other bugs)
Unspecified Unspecified
unspecified Severity high (vote)
: Unspecified
: --
Assigned To: Katello Bug Bin
Og Maciel
: Triaged
Depends On:
  Show dependency treegraph
Reported: 2012-09-25 15:15 EDT by james labocki
Modified: 2014-09-18 12:42 EDT (History)
8 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
When using LDAP-based authentication, System Engine was not verifying LDAP roles for auth-less API calls. This caused subscription-manager to fail when refreshing. This fix corrects the verification and now the roles are correctly verified.
Story Points: ---
Clone Of:
Last Closed: 2012-12-04 14:56:36 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description james labocki 2012-09-25 15:15:18 EDT
Description of problem:
subscription-manager will allow a system to register, but the subscription-manager refresh command will fail with an error when using LDAP based authentication in System Engine.

[root@dhcp46-183 ~]# subscription-manager refresh

Steps to Reproduce:
1. With local authentication, build a system template and export to cloud engine, build, push.

2. Enable LDAP using the instructions here.

3. Launch instances in Cloud Engine and subscribe them.

[root@dhcp46-183 ~]# subscription-manager register --username=myldapuser --password=redhat --org=cbu --environment=Dev
The system has been registered with id: 861a85ab-b232-44ba-a0d4-caa8e2e5c99e 

4. System registers and is seen 

[root@dhcp46-183 ~]# subscription-manager refresh
Comment 2 Jordan OMara 2012-09-26 08:55:34 EDT
Merged https://github.com/Katello/katello/pull/747
Comment 9 Og Maciel 2012-10-24 09:46:21 EDT

* candlepin-
* candlepin-selinux-
* candlepin-tomcat6-
* katello-1.1.12-17.el6cf.noarch
* katello-all-1.1.12-17.el6cf.noarch
* katello-candlepin-cert-key-pair-1.0-1.noarch
* katello-certs-tools-1.1.8-1.el6cf.noarch
* katello-cli-1.1.8-9.el6cf.noarch
* katello-cli-common-1.1.8-9.el6cf.noarch
* katello-common-1.1.12-17.el6cf.noarch
* katello-configure-1.1.9-8.el6cf.noarch
* katello-glue-candlepin-1.1.12-17.el6cf.noarch
* katello-glue-pulp-1.1.12-17.el6cf.noarch
* katello-qpid-broker-key-pair-1.0-1.noarch
* katello-qpid-client-key-pair-1.0-1.noarch
* katello-selinux-1.1.1-2.el6cf.noarch
* pulp-1.1.14-1.el6cf.noarch
* pulp-common-1.1.14-1.el6cf.noarch
* pulp-selinux-server-1.1.14-1.el6cf.noarch
Comment 12 errata-xmlrpc 2012-12-04 14:56:36 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.